Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

22.640 exploits

Referência

CVE-2010-4809

CVE-2010-4809—

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2010-4809

CVE-2010-4809—

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2011-5195

CVE-2011-5195—

Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference

23RISCO

abrir ↗

Referência

CVE-2020-3956

CVE-2020-3956—

VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4

28RISCO

abrir ↗

Referência

CVE-2010-0724

CVE-2010-0724—

SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2010-0724

CVE-2010-0724—

SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

SmartBlog 1.3 - 'index.php' SQL Injection

CVE-2008-2183—webappsphp

SQL injection vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

X7 Chat 2.0.4 - 'old_prefix' Blind SQL Injection

CVE-2006-3851—webappsphp

SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2016-7637

CVE-2016-7637—

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchO

23RISCO

abrir ↗

Referência

CVE-2016-7637

CVE-2016-7637—

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchO

23RISCO

abrir ↗

Referência

CVE-2012-0905

CVE-2012-0905—

SQL injection vulnerability in deV!L'z Clanportal (DZCP) Gamebase addon allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2009-2715

CVE-2009-2715—

Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a

23RISCO

abrir ↗

Referência

CVE-2017-13772

CVE-2017-13772—

Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated

35RISCO

abrir ↗

Referência✓ VexDay Proof

Link Trader - 'lnkid' SQL Injection

CVE-2008-6102—webappsphp

SQL injection vulnerability in ratelink.php in Link Trader Script allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hospital Management System 4.0 - 'searchdata' SQL Injection

CVE-2020-5192—webappsphp

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages an

43RISCO

abrir ↗

Referência✓ VexDay Proof

phpBP RC3 (2.204) - SQL Injection / Remote Code Execution

CVE-2007-0370—webappsphp

Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier allows remote administrators to inj

23RISCO

abrir ↗

Referência✓ VexDay Proof

alitalk 1.9.1.1 - Multiple Vulnerabilities

CVE-2008-0371—webappsphp

Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled, allow remote authenticated

23RISCO

abrir ↗

Referência

CVE-2010-4835

CVE-2010-4835—

Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users

23RISCO

abrir ↗

Referência

CVE-2012-0980

CVE-2012-0980—

SQL injection vulnerability in download.php in phux Download Manager allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência

CVE-2012-0935

CVE-2012-0935—

SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2024-22901

CVE-2024-22901CRITICAL

Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials.

48RISCO

abrir ↗

Referência

CVE-2023-0830

CVE-2023-0830MEDIUM

EasyNAS backup.pl system os command injection

38RISCO

abrir ↗

Referência

CVE-2011-4672

CVE-2011-4672—

Multiple SQL injection vulnerabilities in Valid tiny-erp 1.6 and earlier allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-5083

CVE-2010-5083—

SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência

CVE-2017-13795

CVE-2017-13795—

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud

23RISCO

abrir ↗

Referência

CVE-2025-15047

CVE-2025-15047CRITICAL

Tenda WH450 HTTP Request PPTPDClient stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2025-15047

CVE-2025-15047CRITICAL

Tenda WH450 HTTP Request PPTPDClient stack-based overflow

48RISCO

abrir ↗

Referência

Invision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting

CVE-2020-29477—webappsmultiple

Invision Community 4.5.4 is affected by cross-site scripting (XSS) in the Field Name field. This vulnerability can allow

23RISCO

abrir ↗

Referência

CVE-2017-13802

CVE-2017-13802—

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud

23RISCO

abrir ↗

Referência

CVE-2010-4838

CVE-2010-4838—

SQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote authenticated users

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.